What I do not understand is why after 1.2 seconds I do not get fired the Out statement again, as I would expect.

Please note that if I try the first two inserts alone and the second two inserts alone, in both cases I have the Monitor statement fired twice and the Out statement fired once. The problem arises when I concatenate the four insert statements.

Would the rule above be matched multiple times, as expected and desired, when deployed to RSA Netwitness Logs & Packet?